Windows AV Component

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 15
First Seen: June 27, 2011
Last Seen: January 8, 2020
OS(es) Affected: Windows

Windows AV Component is a fake anti-virus software which pretends to be able to remove imaginary system errors and computer problems from your PC. Windows AV Component enters your computer via Trojan infection, which is easy to catch while you click on flash advertisement or open some malicious website. Usually, the Trojan download starts automatically, and it does not need your consent to install itself on your computer system. When Windows AV Component installs on your PC system, it states that your computer has been corrupted by an unidentified Trojan, and then it urges you to execute a quick system scan. Following everything Windows AV Component says, you will download and install this rogueware onto your machine. Then Windows AV Component will show a lot of fake security alerts claiming that your PC security is in danger, and there are many malware threats detected on your system, which does not enable your computer to operate properly. Windows AV Component will surely slow down your PC's performance, making it seem as if this is happening because of the alleged infections which you should remove at once using Windows AV Component. Windows AV Component only aims at stealing your money, and if you click on "Fix Errors" button on its interface, you will be rerouted to its purchase web page, and there you will be required to provide your name, last name, credit card number, expiration date, etc. When the creators of Windows AV Component have this information, they will be able to access your bank account anytime; so you need to remove Windows AV Component from your PC system as soon as possible.

SpyHunter Detects & Remove Windows AV Component

File System Details

Windows AV Component may create the following file(s):
# File Name MD5 Detections
1. brjncj.exe a08c141f52addfd1640da9496f6deb30 1
2. %AppData%\Microsoft\[RANDOM CHARACTERS].exe

Registry Details

Windows AV Component may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows

2 Comments

I AM A VICTOM OF THIS FAKE ANTI-VIRUS. I CAN'T ACCESS ANY PROGRAMS AND I CAN'T CONNECT TO THE INTERNET BY CHROME,YHOO,OR AOL. I DONOT HAVE FIREFOX. THE POP-UP THIS SOFTWARE WILL NOT LET ME INSTALL A ANTI-VIRUS SOFTWEAR. WHAT OTHER SUGGESTIONS DO YOU HAVE.

Hello James,

You can try the following.

Go to your control panel and open User Accounts. From there, create a new user account with administrator privileges, then restart or log off of your system and log in again, using the newly created account. At this point, try to download SpyHunter and it will clean your machine.

If the above has failed, try to navigate to our webpage "http://www.enigmasoftware.com" and on the right hand side you will find a yellow box with the following text:

"IMPORTANT ADVISORY
Does Malware block SpyHunter installation?
Does 'Open With' box appear when you run SpyHunter?
CLICK HERE to run this SpyHunter installer."

Click on the download link and try installing again. Alternatively, you can click on "learn more" and try the "safe mode" solution.

If your browser has been hijacked and you are unable to navigate through the internet, you can try accessing the direct link:
https://www.enigmasoftware.com/SpyHunter-Installer.com

Good Luck and please let us know if you need more assistance.

All the best!

Trending

Most Viewed

Loading...